{"cve_id":"CVE-2020-9425","title":"rConfig <3.9.4 - Sensitive Information Disclosure","severity":"high","actively_exploited":false,"patterns":["/settings.php"],"events":133,"unique_ips":9,"actors":[{"ip":"34.34.103.195","events":42,"country_code":"NL","country":"The Netherlands","org":"Google LLC","rdns":"195.103.34.34.bc.googleusercontent.com","scanner_tag":{"key":"gcp","label":"Google Cloud","category":"hosting_provider","url":"https://cloud.google.com/"}},{"ip":"147.139.178.214","events":29,"country_code":"ID","country":"Indonesia","org":"Alibaba (US) Technology Co., Ltd.","rdns":"","scanner_tag":null},{"ip":"120.55.12.214","events":22,"country_code":"CN","country":"China","org":"Hangzhou Alibaba Advertising Co.,Ltd.","rdns":"","scanner_tag":null},{"ip":"47.96.254.170","events":19,"country_code":"CN","country":"China","org":"Hangzhou Alibaba Advertising Co.,Ltd.","rdns":"","scanner_tag":null},{"ip":"151.243.150.222","events":6,"country_code":"DE","country":"Germany","org":"Dedik Services Limited","rdns":"","scanner_tag":null},{"ip":"213.209.159.175","events":5,"country_code":"TW","country":"Taiwan","org":"Feo Prest SRL","rdns":"","scanner_tag":null},{"ip":"87.58.199.37","events":4,"country_code":"US","country":"United States","org":"WebNX, Inc.","rdns":"","scanner_tag":null},{"ip":"38.127.60.25","events":4,"country_code":"US","country":"United States","org":"Enzu Inc","rdns":"25.60-127-38.rdns.scalabledns.com","scanner_tag":null},{"ip":"195.128.248.33","events":2,"country_code":"UA","country":"Ukraine","org":"Virtual Systems LLC","rdns":"dedicated.vsys.host","scanner_tag":null}],"top_asns":[{"asn":396982,"org":"Google LLC","events":42,"ips":1},{"asn":37963,"org":"Hangzhou Alibaba Advertising Co.,Ltd.","events":41,"ips":2},{"asn":45102,"org":"Alibaba (US) Technology Co., Ltd.","events":29,"ips":1},{"asn":209413,"org":"Dedik Services Limited","events":6,"ips":1},{"asn":208137,"org":"Feo Prest SRL","events":5,"ips":1},{"asn":18978,"org":"Enzu Inc","events":4,"ips":1},{"asn":18450,"org":"WebNX, Inc.","events":4,"ips":1},{"asn":6698,"org":"Virtual Systems LLC","events":2,"ips":1}],"fingerprints":{"ja4h":["ge11nn0400_88d30a62b7ad","ge11nn0300_88b8dd6ae43e","ge11nn06en_e4773a62bf4c","he11nn0200_3ed38b250d3d","ge11nn06en_c79eadf4d2aa","ge11nn0500_cac2c496544b"],"ja4":["t13i311000_e8f1e7e78f70_d41ae481755e","t13i3111h2_e8f1e7e78f70_8d633dac7124","t13i251000_b78ed14e2fd0_ab7e3b40a677","t13i131000_f57a46bbacb6_ab7e3b40a677"]},"sample_paths":["/settings.php.tmp","/settings.php.swp","/sites/default/settings.php","/settings.php.bak","/web/settings.php","/settings.php.txt","/settings.php","/settings.php.dist","/settings.php.old","/settings.php.save"],"timeline":[{"day":"2026-07-04","events":3,"ips":1},{"day":"2026-07-05","events":3,"ips":1},{"day":"2026-07-06","events":32,"ips":2},{"day":"2026-07-07","events":24,"ips":5},{"day":"2026-07-08","events":44,"ips":5},{"day":"2026-07-09","events":18,"ips":3},{"day":"2026-07-10","events":8,"ips":2},{"day":"2026-07-11","events":1,"ips":1}],"window_hours":168}